Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/PkSqqeUGNRG2Egs38ASFUZeRbSw.mft
File:                     PkSqqeUGNRG2Egs38ASFUZeRbSw.mft (raw, json)
Hash identifier:          uGaP1EXWVOcXsYiIbm3cavlX1fMKqaR8QoV+V/s8JGI=
Subject key identifier:   5F:B8:12:22:CE:ED:95:B1:F6:8E:14:03:7A:E4:DB:EA:17:6E:C9:C6
Authority key identifier: 3E:44:AA:A9:E5:06:35:11:B6:12:0B:37:F0:04:85:51:97:91:6D:2C
Certificate issuer:       /CN=3e44aaa9e5063511b6120b37f004855197916d2c
Certificate serial:       018C3DB75599426A7056CB13CFCB1775F93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PkSqqeUGNRG2Egs38ASFUZeRbSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/PkSqqeUGNRG2Egs38ASFUZeRbSw.mft
Manifest number:          07C3
Signing time:             Wed 06 Dec 2023 06:01:14 +0000
Manifest this update:     Wed 06 Dec 2023 06:01:14 +0000
Manifest next update:     Thu 07 Dec 2023 06:01:14 +0000
Files and hashes:         1: NMCfTa7TfFkLdPl7lo7yivQjZik.roa (hash: ouREumIyRVGJ3pkXzR9lCSHCstEWl6wETE79Bz97wVo=)
                          2: PkSqqeUGNRG2Egs38ASFUZeRbSw.crl (hash: 3PhnjphttlsQ+fhrmC+IWCD6G3Ir6+9To9FJRMovPYQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3d:b7:55:99:42:6a:70:56:cb:13:cf:cb:17:75:f9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e44aaa9e5063511b6120b37f004855197916d2c
        Validity
            Not Before: Dec  6 06:01:14 2023 GMT
            Not After : Dec  7 06:01:14 2023 GMT
        Subject: CN=5fb81222ceed95b1f68e14037ae4dbea176ec9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:3a:76:b0:ce:be:c3:57:9e:53:9e:c2:ff:
                    cc:50:76:2e:63:aa:88:00:f5:fc:02:d8:62:1c:d0:
                    2d:c7:29:28:07:42:cd:b0:1c:2a:8a:54:76:3d:a3:
                    61:6d:f5:5f:80:1e:72:6c:e6:c6:df:04:04:ce:c2:
                    ed:9a:ef:11:40:a2:90:f0:93:16:e3:46:da:8a:20:
                    b1:90:df:8f:b2:f4:99:da:2d:d6:d5:97:5e:08:0d:
                    36:ab:b5:3f:32:09:25:38:95:e8:c6:2e:92:85:a8:
                    b6:ed:88:20:99:cb:7a:d4:62:ea:ec:2d:bc:96:c9:
                    e8:4e:7e:86:d9:82:8f:e7:eb:9c:44:12:03:f4:6c:
                    2c:c5:c8:8d:71:1d:5d:1b:5d:c1:9a:d2:c4:6b:3c:
                    38:30:c8:4a:ed:a6:da:37:21:45:bb:2c:a0:ea:12:
                    e4:3a:10:8e:49:1d:1e:4e:d8:79:c2:93:0b:e1:b4:
                    7a:15:3c:9a:96:d8:40:70:1d:04:16:05:38:f6:32:
                    a2:e4:c4:81:1f:26:55:97:20:6b:10:9b:f1:fa:7e:
                    0c:28:11:35:90:2e:a9:da:29:ef:1c:28:cb:d3:43:
                    2c:e5:56:c0:46:2c:d6:90:31:b7:16:75:ce:93:b8:
                    53:50:d1:e7:c3:92:a5:96:b0:1b:6f:90:59:71:c7:
                    88:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B8:12:22:CE:ED:95:B1:F6:8E:14:03:7A:E4:DB:EA:17:6E:C9:C6
            X509v3 Authority Key Identifier:
                keyid:3E:44:AA:A9:E5:06:35:11:B6:12:0B:37:F0:04:85:51:97:91:6D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkSqqeUGNRG2Egs38ASFUZeRbSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/PkSqqeUGNRG2Egs38ASFUZeRbSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/661609-cfba-47ed-ad4f-066b3cd87d69/1/PkSqqeUGNRG2Egs38ASFUZeRbSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:62:f4:25:74:ea:72:b2:33:c6:c7:15:9a:40:7d:79:c2:
         da:89:7c:ad:14:9b:87:fd:16:b6:29:99:87:02:2c:e1:17:5d:
         c8:d0:f7:8e:da:87:3b:55:04:be:f3:a0:91:11:1f:71:ca:fb:
         c0:4e:42:39:cc:de:8a:c0:57:dd:28:c0:d0:bc:11:a3:30:e2:
         d1:cc:df:13:d7:35:99:b7:2d:29:d8:8f:9c:38:41:32:08:3b:
         1d:b4:59:e1:04:33:4b:9c:cb:24:31:80:19:0b:8a:d8:69:73:
         5f:31:7d:4b:88:83:46:a7:7b:90:48:9f:2b:60:a9:03:01:48:
         04:df:dd:d1:85:2d:5f:bb:04:ad:b2:0d:7f:a5:2c:a0:fb:03:
         b7:50:39:36:66:ce:b6:da:50:cb:07:6c:60:fd:3a:6e:3d:b7:
         74:1d:25:19:66:a0:16:ee:92:5a:02:4c:9d:18:cc:12:6f:9d:
         1e:6f:16:5a:79:16:7c:8e:4a:9a:d0:18:76:d7:31:f6:16:e3:
         28:3d:fa:05:42:55:94:3a:fa:24:78:63:54:ae:6f:80:b2:fd:
         d6:d4:a6:96:c3:64:da:8e:75:eb:d4:c4:c3:8c:a1:74:c9:93:
         05:f9:8e:2d:9d:28:03:f3:d3:84:41:ca:a1:41:9c:eb:61:48:
         4e:f8:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net